In the Linux kernel, the following vulnerability has been resolved:
scsi: lpfc: Check kzalloc() in lpfcsli4cgnparamsread()
If kzalloc() fails in lpfcsli4cgnparamsread(), then we rely on lpfcreadobject()'s routine to NULL check pdata.
Currently, an early return error is thrown from lpfcreadobject() to protect us from NULL ptr dereference, but the errno code is -ENODEV.
Change the errno code to a more appropriate -ENOMEM.
[
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4829a1e1171536978b240a1438789c2e4d5c9715",
"deprecated": false,
"id": "CVE-2023-53038-05d73682",
"target": {
"function": "lpfc_read_object",
"file": "drivers/scsi/lpfc/lpfc_sli.c"
},
"digest": {
"length": 2763.0,
"function_hash": "157543472591741193417656291001276803265"
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@67b8343998b84418bc5b5206aa01fe9b461a80ef",
"deprecated": false,
"id": "CVE-2023-53038-08a860fe",
"target": {
"file": "drivers/scsi/lpfc/lpfc_init.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"84688518408774097071533114576215089000",
"166493413087846399249476444885608516260",
"61059276939624006084730732093584152425",
"85413132113588431148493112176587770916"
]
},
"signature_type": "Line"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@67b8343998b84418bc5b5206aa01fe9b461a80ef",
"deprecated": false,
"id": "CVE-2023-53038-1d0f4013",
"target": {
"function": "lpfc_sli4_cgn_params_read",
"file": "drivers/scsi/lpfc/lpfc_init.c"
},
"digest": {
"length": 626.0,
"function_hash": "157866085601578523644910178501991435638"
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4829a1e1171536978b240a1438789c2e4d5c9715",
"deprecated": false,
"id": "CVE-2023-53038-633cbe1f",
"target": {
"function": "lpfc_sli4_cgn_params_read",
"file": "drivers/scsi/lpfc/lpfc_init.c"
},
"digest": {
"length": 626.0,
"function_hash": "157866085601578523644910178501991435638"
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@908dd9a0853a88155a5a36018c7e2b32ccf20379",
"deprecated": false,
"id": "CVE-2023-53038-6b94e21b",
"target": {
"file": "drivers/scsi/lpfc/lpfc_sli.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"118241733523553496533230341904827137761",
"138438536202536941059405257734576879370",
"157956426404106343641348520014571746450",
"242255350287769981869560759001787375047",
"93821805221070025575506384945017357064"
]
},
"signature_type": "Line"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@908dd9a0853a88155a5a36018c7e2b32ccf20379",
"deprecated": false,
"id": "CVE-2023-53038-95bf45bc",
"target": {
"file": "drivers/scsi/lpfc/lpfc_init.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"84688518408774097071533114576215089000",
"166493413087846399249476444885608516260",
"61059276939624006084730732093584152425",
"85413132113588431148493112176587770916"
]
},
"signature_type": "Line"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@312320b0e0ec21249a17645683fe5304d796aec1",
"deprecated": false,
"id": "CVE-2023-53038-9606f49b",
"target": {
"file": "drivers/scsi/lpfc/lpfc_init.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"84688518408774097071533114576215089000",
"166493413087846399249476444885608516260",
"61059276939624006084730732093584152425",
"85413132113588431148493112176587770916"
]
},
"signature_type": "Line"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4829a1e1171536978b240a1438789c2e4d5c9715",
"deprecated": false,
"id": "CVE-2023-53038-9eda95ff",
"target": {
"file": "drivers/scsi/lpfc/lpfc_init.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"84688518408774097071533114576215089000",
"166493413087846399249476444885608516260",
"61059276939624006084730732093584152425",
"85413132113588431148493112176587770916"
]
},
"signature_type": "Line"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@67b8343998b84418bc5b5206aa01fe9b461a80ef",
"deprecated": false,
"id": "CVE-2023-53038-a0f3b03f",
"target": {
"function": "lpfc_read_object",
"file": "drivers/scsi/lpfc/lpfc_sli.c"
},
"digest": {
"length": 2804.0,
"function_hash": "13452548312580559787174670057380018299"
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@312320b0e0ec21249a17645683fe5304d796aec1",
"deprecated": false,
"id": "CVE-2023-53038-ac6214b2",
"target": {
"function": "lpfc_read_object",
"file": "drivers/scsi/lpfc/lpfc_sli.c"
},
"digest": {
"length": 2763.0,
"function_hash": "157543472591741193417656291001276803265"
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@312320b0e0ec21249a17645683fe5304d796aec1",
"deprecated": false,
"id": "CVE-2023-53038-b108265a",
"target": {
"function": "lpfc_sli4_cgn_params_read",
"file": "drivers/scsi/lpfc/lpfc_init.c"
},
"digest": {
"length": 626.0,
"function_hash": "157866085601578523644910178501991435638"
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@908dd9a0853a88155a5a36018c7e2b32ccf20379",
"deprecated": false,
"id": "CVE-2023-53038-b453bab1",
"target": {
"function": "lpfc_sli4_cgn_params_read",
"file": "drivers/scsi/lpfc/lpfc_init.c"
},
"digest": {
"length": 626.0,
"function_hash": "157866085601578523644910178501991435638"
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@312320b0e0ec21249a17645683fe5304d796aec1",
"deprecated": false,
"id": "CVE-2023-53038-b4dfed69",
"target": {
"file": "drivers/scsi/lpfc/lpfc_sli.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"118241733523553496533230341904827137761",
"138438536202536941059405257734576879370",
"157956426404106343641348520014571746450",
"242255350287769981869560759001787375047",
"93821805221070025575506384945017357064"
]
},
"signature_type": "Line"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4829a1e1171536978b240a1438789c2e4d5c9715",
"deprecated": false,
"id": "CVE-2023-53038-b7a57bea",
"target": {
"file": "drivers/scsi/lpfc/lpfc_sli.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"118241733523553496533230341904827137761",
"138438536202536941059405257734576879370",
"157956426404106343641348520014571746450",
"242255350287769981869560759001787375047",
"93821805221070025575506384945017357064"
]
},
"signature_type": "Line"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@908dd9a0853a88155a5a36018c7e2b32ccf20379",
"deprecated": false,
"id": "CVE-2023-53038-c378398b",
"target": {
"function": "lpfc_read_object",
"file": "drivers/scsi/lpfc/lpfc_sli.c"
},
"digest": {
"length": 2763.0,
"function_hash": "157543472591741193417656291001276803265"
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@67b8343998b84418bc5b5206aa01fe9b461a80ef",
"deprecated": false,
"id": "CVE-2023-53038-d1301d36",
"target": {
"file": "drivers/scsi/lpfc/lpfc_sli.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"118241733523553496533230341904827137761",
"138438536202536941059405257734576879370",
"157956426404106343641348520014571746450",
"242255350287769981869560759001787375047",
"93821805221070025575506384945017357064"
]
},
"signature_type": "Line"
}
]